Re: [opensuse] firefox/thunderbird and root certificates

On Sun, 13 May 2012 20:12:28 +0200 Per Jessen wrote:

Jim Flanagan wrote:

...

On 5/13/12 12:01 PM, Per Jessen wrote:

...

Carl Hartung wrote:

...

On Sun, 13 May 2012 18:41:07 +0200 Per Jessen wrote:

...

I'm trying to install a new root CA - I've placed it in /etc/ssl/certs, and done the rehash. Testing openssl s_client works, but firefox doesn't seem to recognise it. Does firefox not look in /etc/ssl/certs or do I need a magic wand?

Hi Per,

FF is fussy. You can clear cache ("recent browsing history") or go to 'Edit -> Preferences -> Advanced -> Encryption -> View Certificates' to manage what it's stored.

hth& regards,

Carl

Hi Carl, I've already been through FF restart and a complete system ditto (just to be on the safe side). I don't see the certificate under "View Certificates", but how do I get it in there (system wide, not for a single user)? It seems to me that having installed it in /etc/ssl/certs should be enough?

As far as I know Firefox ships with its own list of trusted authorities. Throwback from MS days where Windows has its own store. No idea where they are stored.

They're all in /usr/share/ca-certificates/mozilla and /etc/ssl/certs has symlinks to those. I've also tried adding my root certificate into /usr/share/ca-certificates/mozilla, also to no avail.

...

When you import one, does it only work for that one user and not system wide?

Yep. (it wouldn't be right for a regular user to have access to system-wide settings)

Check out this link (hint: scroll to the bottom): https://bugzilla.mozilla.org/show_bug.cgi?id=449498 which was pointed to from here: https://bugzilla.mozilla.org/show_bug.cgi?id=620373 which was pointed to from here: https://bugzilla.redhat.com/show_bug.cgi?id=546221 There /may/ be enough background in these threads to get you moving in the right direction, Per. <fingers crossed> :-) regards, Carl -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org